How to secure your Docker containers! (5 practical tips with example Dockerfiles! 🐳)

While Docker containers provide many great security features out of the box, there are still many important considerations to ensure your application and data are protected.

In this video, I share five techniques that can help make your production containers more secure!

Cheers!

---
Join the Community:
---

Timestamps:
0:00 - Intro
0:34 - Example webserver code
0:48 - Naive Dockerfile
1:00 - Tip #1: Don't run the container as the root user
1:37 - Tip #2: Use a multi-stage build + distroless base image
2:54 - Tip #3: Harden the security of the host system
3:43 - Tip #4: Use a container image scanner to detect vulnerabilities
4:47 - Tip #5: Don't install/configure things within the Dockerfile without understanding the potential risks
5:15 - Closing thoughts

---

Community Size at Time of Posting:
- Subscribers: 367
- Channel Views: 5523

Note: I have a running joke with my wife that I'm not going to shave my beard until I reach 1000 subscribers (the last time I did was at 100...) and it is starting to get out of control 🧔+🎅+😳

[Kaje_]

Considering the recent security concerns with "cryptojacking" with Docker, this video is indeed a blessing. Security needs to become higher priority in the Docker community or else we're heading right into the next security disaster.

[will-from-tokyo]

Really like the short video format and the drop of high-value tips you've made ! Thank you very much for sharing your expertise.

[rachanayadav]

All the videos in this series are awesome!! As a beginner to docker this really helped me a lot..Thank you

[trofchik]

Picked up Docker yesterday. Your video was helpful. Thank you.

[russellabraham]

I wondered about utilizing some of the concepts in your video with qnx micro kernel. Thanks, great tips.

[azatecas]

Im just dipping my toes into docker. i want to set up a nextcloud server with docker to replace google photos and i want to make it as secure as possible. this is helpful, i wish i knew more about cyber security and containers

[kosmonautofficial]

Great video! I was not aware of multistaged builds I will have to see how to do that in python.

[datamike]

Great video! Super easy to follow, gave me a practical understanding of security best practices. You talked about researching the software you install... What is the best way to do that?

[abqik]

Great tips, can you please elaborate on apprmor linux security hardening.
Otherwise maybe point to resources other than os docs for mint/ubuntu?

[santhoshdevarapalli]

nice video!!! What is the best way to pass nexus credentials inside docker file...??? thanks in advance

[gdvmetrocomedy]

Good, i need additional and deep security tips ..!

[playboy_xx]

distroless means... how do you run Cron jobs ??

[reclee]

would you recommend using docker for daily personal use? i'm thinking it would be a good alternative to using virtual machines (for compartmentalization).

[ckrisl]

How to mount Docker Volume as non root ? uid and gid become nobody and nogroup on dockremap

[SivaKumar-qshw]

Is it possible to run distorless images in aws